Your Privacy,
Our Priority
We are committed to protecting your personal data to the highest security standards. Read our full policy below.
Last updated: June 2026 · Applies to pouchlab.id
Information We Collect
We collect information you provide directly when registering, making a purchase, or contacting us:
- Personal Data: Full name, email address, phone number, and date of birth (for 21+ age verification)
- Shipping Data: Full address, city, province, and postal code
- Payment Data: Processed securely through third-party payment gateways — we do not store your card details
- Usage Data: Pages visited, products viewed, search history, and visit timestamps
- Technical Data: IP address, browser type, operating system, and referrer URL
How We Use Your Information
We use your information solely to provide the best possible service:
- Process and confirm your orders
- Send shipping notifications and order status updates
- Verify user age (minimum 21 years) as required by regulation
- Personalise your shopping experience and product recommendations
- Improve our website performance and content
- Send newsletters and offers (only with your consent)
- Comply with applicable legal obligations in Indonesia
Age Verification
PouchLab only serves users aged 21 and above in accordance with nicotine product regulations in Indonesia.
- We collect age confirmation at checkout
- Age verification data is not retained beyond the transaction session
- We reserve the right to cancel orders where age fraud is suspected
- Parents/guardians are responsible for ensuring this website is not accessed by minors
Data Retention
We retain your data for as long as necessary to provide our services and meet legal obligations:
- Account Data: Retained while the account is active + 2 years after account closure
- Transaction Data: Retained for 5 years in accordance with Indonesian tax regulations
- Log Data: Automatically deleted after 90 days
- Marketing Data: Deleted immediately upon unsubscribe request
You can request deletion of your data at any time by contacting us.
Data Security
We apply industry security standards to protect your data:
- SSL/TLS Encryption: All data is transmitted with 256-bit encryption
- Secure Payments: All transactions are processed through PCI-DSS certified gateways
- Limited Access: Only authorised staff can access sensitive data
- Monitoring: 24/7 monitoring systems to detect suspicious activity
- Backups: Data is backed up regularly to prevent loss
Nevertheless, no method of data transmission is 100% secure. We will notify you promptly if a data breach occurs.
Your Rights
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your personal data
- Restriction: Limit how we process your data
- Portability: Receive your data in a machine-readable format
- Objection: Opt out of data processing for direct marketing purposes
To exercise these rights, contact us at privacy@pouchlab.id
Third-Party Links
Our website may contain links to third-party sites such as social media or partner blogs. We are not responsible for the privacy practices of those sites.
We encourage you to read the privacy policy of every site you visit. The presence of a link on our website does not imply endorsement of that site's content or privacy practices.
Contact Us
For questions, requests, or complaints regarding your data privacy:
- Email: privacy@pouchlab.id
- WhatsApp: +62 812-XXXX-XXXX
- Address: Bali, Indonesia
We will respond to all privacy requests within 14 business days. Data deletion requests may take up to 30 days to process.
Have a Question?
Our team is ready to help with any privacy or data security questions. Don't hesitate to get in touch.
privacy@pouchlab.id